SolrCloud 6 用户访问 /solr/collection/admin/ping

Question

我是新的 Solr，我已经部署了一个 4 个节点的 SolrCloud 集群和 3 个节点的外部 zookeeper。我将一个 security.json 文件部署到限制对集群的访问的 zookeper。我有 2 个用户（admin、user1）。

{
"authentication":{
"blockUnknown":true,
"class":"solr.BasicAuthPlugin",
"credentials":{
  "admin”:”asdjboagsdbpnabojfm”,
  "user1”:”jsidafhoihda0idfhnasndi”},
"":{"v":15}},
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"permissions":[
  {
    "name":"all",
    "role":"admin",
    "index":1},
  {
    "name":"security-edit",
    "role":"admin",
    "index":2},
  {
    "name":"read",
    "role":"dev",
    "index":3},
  {
    "name":"update",
    "role":"dev",
    "index":4},
  {
    "name":"collection-admin-read",
    "role":"dev",
    "index":5},
  {
    "name":"config-read",
    "role":"dev",
    "index":6}],
"user-role":{
  "admin":[
    "admin",
    "dev"],
  "user1":["dev"]},
"":{"v":39}}
}

当我尝试以下 url、

curl -u admin:password -k -s "https://solrcloud-01.dfw.3mhis.vm:8080/solr/test/admin/ping?wt=json&indent=on"

注意：测试是 2 个分片的集合，每个分片上有 1 个复制。我收到“200 STATUS OK”响应，但是当我将其作为 user1 尝试时，它给了我未经授权的请求。我在这里做错了什么。此外，solr 版本为 6，其中 ping 是根据 https://cwiki.apache.org/confluence/display/solr/Implicit+RequestHandlers

可用的隐式可用端点之一

Answer 1

基本上我给了security.json

以下权限

{   "path":"/admin/ping",
    "role":"dev",
    "index":7
}

SolrCloud 6 用户访问 /solr/collection/admin/ping

SolrCloud 6 user access to /solr/collection/admin/ping

solr

solrcloud